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Top Stories 

• Authorities are investigating a plane crash over the San Francisco Bay April 27, in which 2 
small planes collided in the air sending 1 plane crashing into the bay while the other plane 
landed later at Eagle’s Nest Airport in lone, California. - Associated Press (See item 5 ) 

• Interstate 15 in Beaver County, Utah, was shut down for several hours April 27 after a 
suspect kidnapped a child and started a high-speed chase, eventually barricading himself 
and the child in the vehicle for hours before giving up peacefully. - KSL 102.7 FM Salt 
Lake City (See item 6) 

• Authorities arrested 5 nurses of Prime Health LLC in Plaquemine, Louisiana, April 24 in 
connection to accepting money in exchange for obtaining fake prescriptions for drugs used 
to make a recreational drug mixture. - Baton Rouge Advocate (See item 15 ) 

• Microsoft warned users of its Internet Explorer (IE) browser after researchers discovered a 
critical zero day vulnerability that affects IE 6 through IE 1 1 and could allow an attacker to 
use a Flash exploitation technique to remotely execute code. - V3.co.uk (See item 19 ) 
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Energy Sector 



1. April 24, Biloxi Sun Herald - (Mississippi) OSHA cites Chevron in November 
explosion that killed woman. Chevron’s Pascagoula refinery in Mississippi was cited 
by the Occupational Safety and Health Administration April 24 for safety violations 
from a November 2013 incident that killed a plant operator after an explosion and fire 
occurred in a furnace in the Cracking II unit. Proposed fines totaled $24,000. 

Source: http ://ww w. sunherald.com/20 1 4/04/24/5 5211 03/osha-cites-chevron-in- 
november.html 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. April 27, WSAU 550 AM Wausau - (Wisconsin) Merrill business damaged by fire. 
The Yorde Tool and Machining facility in Merrill sustained around $400,000 in 
damage from a fire that broke out April 26 and destroyed a storage area of the facility. 
Source: http://wsau.com/news/articles/2014/apr/27/merrill-business-damaged-by-fire/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

3. April 25, Atlanta Journal-Constitution - (Georgia) FDIC sues directors and officers 
of failed Bartow bank. The Federal Deposit Insurance Corporation (FDIC) filed a 
lawsuit against the former directors and officers of the failed Bartow County Bank in 
Georgia for allegedly making risky loans and not adhering to the bank’s loan policies, 
which led to the bank’s collapse and cost the FDIC around $69.5 million. 

Source: http://www.aic.com/news/business/fdic-sues-directors-and-officers-of-failed- 
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bartow-/nfhjS/ 



4. April 25, Associated Press - (National) Ex-Islanders partial owner admits 
investment fraud. A former partial owner of the New York Islanders pleaded guilty to 
participating in a 13-year investment fraud scheme that enabled him to misappropriate 
$50.7 million from investors. The fraud scheme involved securities businesses in 
Connecticut and California and misappropriated hundreds of millions of dollars from 
accounts belonging to clients, including university foundations and pension plans. 
Source: http://abcnews.go.com/Sports/wireStorv/islanders-partial-owner-admits- 
investment-fraud-23471790 
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Transportation Systems Sector 

5. April 28, Associated Press - (California) Pilot missing after 2 planes collide in 
California. The Federal Aviation Administration is investigating a plane crash over the 
San Francisco Bay April 27, in which 2 small planes collided in the air, sending 1 plane 
crashing into the bay while the other plane with 2 onboard landed 40 minutes later at 
Eagle’s Nest Airport in lone, California. 

Source: http://news.msn.com/us/2-planes-collide-over-northern-san-francisco-bay 

6. April 27, KSL 102.7 FM Salt Lake City - (Utah) 1-15 standoff ends as a man holding 
child hostage surrenders. Interstate 15 in Beaver County, Utah, was shut down for 
several hours April 27 after a suspect in a homicide investigation in Louisiana 
kidnapped a 2-year-old child and started a high-speed chase, eventually barricading 
himself and the child in the vehicle for hours before giving up peacefully. 

Source: http://www.ksl.com/?sid=29660803&nid=148 

7. April 25, Pasadena Star-News - (California) Truck carrying 75,000 plastic balls 
breaks down on 210 Freeway offramp. The California Highway Patrol closed the 
Baldwin Avenue offramp on westbound 210 Freeway in Arcadia for over 3 hours April 
25 after a semi-truck’s trailer buckled and broke down. 

Source: http://www.pasadenastarnews.com/general-news/20140425/truck-carrving- 
75000-plastic-balls-breaks-down-on-210-freeway-offramp 

8. April 24, KABC 790 AM Los Angeles - (California) Tractor-trailer crash shuts down 
210 Freeway, Gold Line. A collision between a semi-truck and a box truck April 24 
caused the California Highway Patrol to shut down eastbound lanes of the 210 Freeway 
in Pasadena for several hours and damaged the Metro Gold Line tracks by striking an 
energized power pole, causing the Gold Line to be out-of-service for about 24 hours. 
Source: 

http://abclocal.go.com/kabc/storv?section=news/local/los angeles&id=95 15521 
Lor another story, see item 13 



-3 - 



1 Return to top i 



Food and Agriculture Sector 



9. April 27, Food Poisoning Bulletin - (National) Stonyfield recalls yogurt for coliform 
bacteria. Stonyfield recalled 188 of its 6-pack, 4-ounce YoBaby Peach/Pear Cups sold 
in Target and Walmart stores, due to possible coliform bacteria contamination. The 
problem was discovered during internal testing by the company. 

Source: http://foodpoisoningbulletin.com/2014/stonvfield-recalls-vogurt-for-coliform- 
bacteria/ 

10. April 27, Food Poisoning Bulletin - (Wisconsin) Merchant Meats recalls snack 
sticks and bratwurst. Merchant Meats and Sausage of Sturgeon Bay, Wisconsin, 
issued a recall for 1,915 pounds of its snack sticks and bratwurst products due to 
undeclared nonfat dry milk. The products were sold through retailers and wholesalers 
in Door County between July 2013 and April 18, 2014. 

Source: http://foodpoisoningbulletin.com/2014/merchant-meats-recalls-snack-sticks- 
and-bratwurst/ 

11. April 26, Food Poisoning Bulletin - (Kentucky) BBQ pork recalled for undeclared 
soy. Knockum Hill Bar-B-Que of Herndon, Kentucky, issued a recall for 350 pounds of 
its Knockum Hill Bar-B-Que Pit Cooked Barbecued Pork sold in white tubs due to 
undeclared soy. 

Source: http://foodpoisoningbulletin.com/2014/bbq-pork-recalled-for-undeclared-sov/ 
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Water and Wastewater Systems Sector 

12. April 28, WITN 7 Washington - (North Carolina) Water advisory for Camp Lejeune. 
Residents in Camp Lejeune, North Carolina, experienced an indefinite disruption of 
water service after a large water main broke April 27, causing emergency water utility 
crews to work overnight in hopes to have service restored by April 28. 

Source: http://www.witn.com/home/headlines/-Water-Advisory-For-Camp-Leiuene— 
256969001.html 

13. April 27, WHAS 11 Louisville - (Kentucky) Highlands water main repaired; 
intersection remains closed until Wednesday. An underground water main that was 
broken April 24 and caused a water service disruption for many in the Highlands area 
of Louisville was repaired April 27, but the intersection of Eastern Parkway and Baxter 
Avenue remained closed until crews can repave the road after breaking ground to reach 
the water main. 

Source: http://www.whas 1 1 .com/news/Highlands-water-main-repaired-intersection- 
remains-closed-256918891.html 

14. April 27, Pittsburgh Tribune -Review - (Pennsylvania) Boil water advisory remains in 
effect in Indiana County. About 2,500 households in western Indiana County, 
Pennsylvania, who receive water from the Indiana County Municipal Services 
Authority Crooked Creek Water Treatment Plant were placed under a boil water 
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advisory through April 28 as a precaution after two membrane filters at the plant failed 
efficiency tests April 25 

Source: http://triblive.com/news/indiana/6018262-74/authoritv-boil-plant 
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Healthcare and Public Health Sector 

15. April 27, Baton Rouge Advocate - (Louisiana) Five booked in ‘purple drank’ 

investigation. Authorities arrested 5 current and former nurses of Prime Health LLC in 
Plaquemine April 24 in connection to accepting money during the past 6 months in 
exchange for obtaining fake prescriptions for drugs used to make a recreational drug 
mixture consisting of prescription- strength cough syrup. Officials stated that more 
arrests are expected in the investigation. 

Source: http://theadvocate.com/home/8994791-125/five-booked-in-purple-drank 
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Government Facilities Sector 

16. April 26, Baltimore Sun - (Maryland) Former Hopkins grad students’ personal data 
exposed online. Johns Hopkins University officials notified 2,166 former students that 
their Social Security numbers were exposed to potential hackers after discovering 
March 19 that the information was stored on a server which was available on the 
Internet. The files were taken offline and the university does not believe the 
information was accessed maliciously but found that the records were retrieved a few 
dozen times, potentially by search engines or web crawlers. 

Source: http://articles.bahimoresun.com/2014-04-26/news/bs-md-hopkins-data- 
20140426 1 social-security-numbcrs-hopkins-grad-personal-data 

17. April 25, KMTR 16 Eugene - (Oregon) Bomb threat forces evacuation of all 11 
Oregon State dorms. Eleven Oregon State University residence halls were evacuated 
for more than 2 hours April 24 after a bomb threat was phoned into the university’s 
department of public safety office. Police cleared the scene once nothing suspicious 
was found after searching the dorms. 

Source: http://www.kmtr.com/news/local/Bomb-threat-forces-evacuation-of-all-ll- 
Oregon-State-dorms-256726121.html 

18. April 25, Farmington Daily Times - (New Mexico) Kirtland Central High School 
evacuated because of strong gas odor. Students were evacuated from Kirtland Central 
High School in Farmington for 3 hours April 25 due to a strong odor of gas. Crews 
cleared the scene after no gas leaks were found in the building. 

Source: http://www.dailv-times.com/four comers-news/ci 25636956/kirtland-central- 
high-school-evacuated-because-strong-gas 
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For additional stories, see items 4 and 12 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

19. April 28, V3.co.uk - (International) Critical Microsoft Internet Explorer flaw leaves 
one in four web users vulnerable. Microsoft warned users of its Internet Explorer (IE) 
browser after FireEye researchers discovered a critical zero day vulnerability that 
affects IE 6 through IE 1 1 and could allow an attacker to use a Flash exploitation 
technique to remotely execute code. FireEye researchers spotted attacks using the 
vulnerability targeting IE 9 through IE 1 1, representing about a quarter of total browser 
users. 

Source: http://www.v3.co.uk/v3-uk/news/2341834/critical-microsoft-internet- 
explorer-flaw-leaves-one-in-four-web-users-vulnerable 

20. April 28, Softpedia - (International) 4 vulnerabilities and 38 bugs fixed with the 
release of MyBB 1.6.13. The latest version of MyBB was released for download, 
closing 4 security vulnerabilities and addressing 38 functionality bugs. 

Source: http://news.softpedia.com/news/4-Vulnerabilities-and-38-Bugs-Fixed- 
With-the-Release-of-MyBB-l-6-13-439653.shtml 



21 .April 28, Softpedia - (International) Apache Struts 2.3.16.2 released to properly fix 
zero-day vulnerability. The Apache Software Foundation released an update for its 
Apache Struts open-source framework, addressing an issue with a previous update that 
included a fix for a zero day vulnerability that was not efficient. 

Source: http://news.softpedia.com/news/Apache-Struts-2-3-16-2-Released-to- 
Properlv-Fix-Zero-Dav-Vulnerabilitv-439621.shtml 

22. April 28, Softpedia - (International) XSS vulnerability in Sohu.com leveraged for 
large-scale DDoS attacks. The source of a distributed denial of service (DDoS) attack 
on a client of Incapsula early in April that involved 20 million GET requests was found 
to be Sohu.com, a popular Chinese Web portal. Incapsula informed Sohu.com of the 
issue and the site was able to close a cross-site scripting (XSS) vulnerability that was 
used to power the attack. 

Source: http://news.softpedia.com/news/XSS-Vulnerabilitv-in-Sohu-com- 
Leveraged-for-Large-Scale-DDQS-Attacks-439606.shtml 

23. April 25, Softpedia - (International) Security patches released for IP.Board 3.3.x and 
3.4.x. Invision Power Services released security patches for its IP.Board 3.3.x and 3.4.x 
products, addressing three file inclusion issues and a cross-site scripting (XSS) 
vulnerability. 

Source: http://news.softpedia.com/news/Security-Patches-Released-for-IP- 
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Board-3-3-x-and-3-4-x-439416.shtml 



24. April 25, Threatpost — (International) Exploiting Facebook Notes to launch DDoS. A 
security researcher discovered and reported a method that can be used to launch 
distributed denial of service (DDoS) attacks through the Facebook Notes feature by 
using random GET parameters for HTML tags. Facebook stated that they 
acknowledged the issue but would not change the method the tags are handled because 
it would degrade user functionality. 

Source: http://threatpost.com/exploiting-facebook-notes-to-launch-ddos/105701 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

25. April 28, St. Petersburg Bay News 9 - (Florida) Fire destroys part of Tampa 
apartment building, leaving several homeless. About 12 people were displaced and 
15 units were damaged by a fire that broke out April 28 at the Waterman’s Crossing 
apartment complex in the Wellswood area of Tampa. Authorities believe the fire began 
in the kitchen of one unit and spread to surrounding units. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/news/article.html/content/news/arti 
cles/bn9/20 14/4/2 8/fire destroyes part .html 

26. April 27, KFOX 14 El Paso - (Texas) Central El Paso fire destroys church, local 
business. Firefighters responded to the El tempo Cristiano church and the Brassco 
Plumbing Company in El Paso when a fire broke out, causing the building’s roof to 
collapse due to high winds that swept the fire through the building. 

Source: http://www.kfoxtv.com/news/features/top-stories/stories/central-el-paso-fire- 
destroys-church-local-business-4612.shtml 

27. April 27, KMPH 26 Visalia - (California) 19 homeless after Chinatown apartment 
fire. Officials are investigating the cause of an apartment fire that broke out April 26 in 
the Chinatown neighborhood of Fresno and left 19 residents displaced. 

Source: http://www.kmph.com/story/25351412/19-homeless-after-chinatown- 
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apartment-fire 



28. April 27, Lompoc Record - (California) Carnival company fighting safety fines. The 
California Division of Occupational Safety and Health fined Butler Amusements Inc., 
$101,250 after an investigation revealed the amusement ride operator knowingly 
allowed patrons onto 2 compromised rides at the Big Fresno Fair in October 2013. 
Officials inspected and permitted both rides for the 2014 operating season. 

Source: http://www.lompocrecord.com/news/local/crime-and-courts/carnival-companv- 
fighting-safety-fines/article 531c3dfe-cdc4-lle3-9d9a-0019bb2963f4.html 

29. April 25, Kansas City Star - (Kansas) Fire damages 12 Overland Park apartments 
and displaces more than 40 people. Officials believe a recently-repaired electric stove 
caused a 2-alarm fire that displaced more than 40 residents and damaged 12 units at the 
Antioch Woods apartments in Overland Park April 25. 

Source: http://www.kansascitv.com/2014/04/25/4982226/crews-battle-large-apartment- 
fire.html 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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